
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
File: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft (raw, json)
Hash identifier: eNjev4GTUdkDQdp8ayztZw+jz/M16RUqq/Y85PYmfT8=
Subject key identifier: 04:91:1F:5E:0B:2A:D0:E6:3D:6F:78:B0:ED:F8:BD:E8:36:06:F6:33
Authority key identifier: 40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
Certificate issuer: /CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Certificate serial: 019F91A39F2C2B43756B1E8525CB349A561E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
Manifest number: 19D2
Signing time: Fri 24 Jul 2026 01:00:46 +0000
Manifest this update: Fri 24 Jul 2026 01:00:46 +0000
Manifest next update: Sat 25 Jul 2026 01:00:46 +0000
Files and hashes: 1: 1-ojtBFfG2H1rWqjbXk4N7WD3PpY.roa (hash: 33NVVlGbTWQg3lb1uDpxYt5Pr6SGR6CWL3Kw3mH/dfw=)
2: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl (hash: FSAVD8sN2Intnx5RPANFalBUcQFlM6jgR+fZSJ+ZOdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:9f:2c:2b:43:75:6b:1e:85:25:cb:34:9a:56:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Validity
Not Before: Jul 24 01:00:46 2026 GMT
Not After : Jul 25 01:00:46 2026 GMT
Subject: CN=04911f5e0b2ad0e63d6f78b0edf8bde83606f633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ed:d9:fd:f2:06:a7:8a:4c:62:73:c5:4f:b1:
2e:f2:b5:fe:7f:7a:0b:a9:b3:6f:fb:88:05:8b:01:
8d:51:e3:06:68:ea:81:02:7f:dd:ab:47:8a:40:c6:
e7:0a:b7:b4:a5:09:a2:f2:54:9a:d4:6c:53:61:30:
01:07:0c:a1:6a:52:18:03:2b:6c:8f:5e:7b:56:8e:
3a:4f:60:85:4d:a7:61:75:e8:e7:23:ea:18:bb:28:
84:04:37:1a:b1:07:55:72:22:e3:78:04:12:45:80:
aa:27:6a:dc:ee:12:de:d6:b3:ca:29:bd:8f:b7:74:
af:32:76:34:30:e6:0c:a5:e0:66:24:8e:61:7f:41:
a6:3a:25:91:ff:d3:cc:99:76:dd:e5:04:54:27:8b:
46:dd:c7:eb:6a:cf:bc:c7:56:e0:00:a6:d7:4e:46:
c7:60:91:d5:f3:2f:6a:27:6c:1a:88:b1:9e:dd:8b:
79:60:e9:42:ee:99:32:7a:fb:11:02:2d:cb:85:7f:
6c:23:1f:8d:2f:a3:30:44:28:ee:03:c3:7b:a1:a0:
dc:15:64:2d:9b:b3:9b:38:30:34:4f:ea:22:99:69:
f6:92:27:99:2a:9c:96:86:bc:04:17:9e:1c:ae:f2:
2e:2d:c7:e6:5d:57:e1:c3:7a:51:7f:31:36:56:21:
eb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:91:1F:5E:0B:2A:D0:E6:3D:6F:78:B0:ED:F8:BD:E8:36:06:F6:33
X509v3 Authority Key Identifier:
keyid:40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e8:0a:f0:cd:94:10:1a:ef:7e:2d:6e:ed:f8:e7:88:94:aa:
ef:45:d2:fd:d5:69:82:f3:63:f7:fe:a0:00:61:59:b4:b1:ab:
61:d5:67:30:1f:d0:59:4b:72:0b:63:0a:00:75:37:d4:58:0e:
9e:64:b8:bf:9d:d8:f7:cc:ee:d1:3b:e0:aa:b5:31:bf:1d:d2:
cd:8a:18:d3:bc:25:d4:50:3d:7a:94:85:af:16:81:33:26:b3:
34:ed:9d:75:ea:bb:bb:64:42:dd:b2:e7:a8:da:27:96:f0:df:
c5:3d:67:71:df:c2:9d:d6:28:d7:fa:28:92:11:3b:88:d5:ee:
96:61:fb:44:9c:48:3b:8c:11:98:97:99:22:a1:00:3a:c4:f7:
fa:4a:32:b7:a5:21:f0:fa:65:30:69:3d:a4:a0:b5:c5:19:99:
19:af:d3:f2:28:67:dd:fe:88:bb:70:9e:01:b0:89:f5:a1:f3:
ac:6e:e3:cb:4c:d4:0d:3e:0d:93:ea:47:ab:00:4e:1d:00:65:
88:e5:62:3c:a8:e9:f7:25:72:8d:9b:0c:4e:c0:05:e4:e8:69:
86:e8:fa:81:48:55:f2:f4:16:01:6d:3d:1d:1c:d6:66:bf:ab:
cb:1d:1c:2f:14:92:9d:2a:54:0f:a1:39:3d:db:e9:5d:ec:4a:
47:9c:33:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:13:32 2026 by rpki-client